No, really. They didn’t. They were within the law, and honest about what they were up to.
So let’s take a quick look at what they’ve done. First, they gave access to account data to a couple of researchers (who happened to be affiliated with Cambridge Analytica). And then, well, that was it, right? I mean, it seems like it was.